CVE-2018-16483

A deficiency in the access control in module express-cart <=1.1.5 allows unprivileged users to add new users to the application as administrators.

Score

CVSS 3.0 8.8 High

Status

Modified - support@hackerone.com

Published

2019-02-01

Last modified

2024-08-05

Weaknesses

CWE-290

Affected products

• Express-cart (Express-cart Project)
• Express-cart (Hackerone)

References

• https://hackerone.com/reports/343626